Welcome! Log In Create A New Profile

Advanced

Re: [PATCH] set $https for use behind SSL-stripping load-balancer

Maxim Dounin
March 03, 2015 07:02AM
Hello!

On Tue, Mar 03, 2015 at 02:49:44PM +1000, Alex Wilson wrote:

>
> > On 28 Jan 2015, at 2:35 pm, Alex Wilson <alex@cooperi.net> wrote:
> >
> > Currently when using nginx behind an SSL-stripping load-balancer, there is no way to control the scheme used when generating directory redirects….
> >
>
> Has anyone got any feedback for me on this patch by any chance? Is this something that’s just not wanted, or is my code terrible, or…?
>
> Sorry to be a nag, I was hoping to at least get a “no, go away” :)

While the problem you are trying to solve is clear enough, I can't
say I like the patch suggested. If we are going to address this,
I would prefer something in line with server_name_in_redirect
(may be something like "relative_redirects" will do the trick,
it's allowed as per RFC7231 now) and/or realip module.

--
Maxim Dounin
http://nginx.org/

_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

[PATCH] set $https for use behind SSL-stripping load-balancer Attachments

Alex Wilson 816 January 27, 2015 11:38PM

Re: [PATCH] set $https for use behind SSL-stripping load-balancer

Alex Wilson 270 March 02, 2015 11:52PM

Re: [PATCH] set $https for use behind SSL-stripping load-balancer

Maxim Dounin 283 March 03, 2015 07:02AM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 296
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready